Stop vibe-debugging. Every exception, every backtrace, grouped so you see patterns, not noise. Learn more →
Top 3 Rust Penetration Testing Projects
-
KeyHunter
Fast Rust scanner to find leaked API keys on GitHub - OpenAI, Anthropic, Claude, GPT, AWS, Stripe, HuggingFace + 45 providers. Verify active secrets instantly.
-
AppSignal
AppSignal knows why the f*#k it crashed. Stop vibe-debugging. Every exception, every backtrace, grouped so you see patterns, not noise.
-
-
ghosthound
GhostHound is a BloodHound OpenGraph extension that surfaces Active Directory tombstone reanimation as a first-class attack path, enumerating deleted objects via SHOW_DELETED, mapping who can restore them, and revealing when a reanimated identity regains privileged group membership.
im developing some FOSS cybersec tools lately and im getting some nice feedback so it motivates me, the tools are
Skewrun -> a tool that solves the Kerberos KRB_AP_ERR_SKEW (Clock Skew Too Great) error, allowing you to run tools like Impacket or NetExec from a Linux attack machine whose clock is heavily desynchronized from the target Windows domain, without requiring root privileges to change the system time. (https://github.com/JVBotelho/skewrun)
GhostHound -> an Bloodhound opengraph lib that deals with Tombstone reanimation as a BloodHound attack path, enumerating CN=Deleted Objects and who can restore them (https://github.com/JVBotelho/ghosthound), this one even landed in Bloodhound's documentation as community lib
Rust Penetration Testing discussion
Rust Penetration Testing related posts
-
GitHub: Can no longer search code without being logged in
-
What's everyone working on this week (26/2023)?
-
Show HN: Nosey Parker, a fast and low-noise secrets detector for textual data
-
Nosey Parker, a fast and low-noise secrets detector, now supports enumerating GitHub repositories and writing results in SARIF format
-
Show HN: Nosey Parker, a fast and low-noise secrets detector for textual data
-
Nosey Parker, a newer secrets detector, can scan 100GB of Linux kernel commit history in 2 minutes on a laptop, and now can write SARIF output
-
Nosey Parker, a fast secrets detector, now enumerates GitHub repos, writes SARIF output, and has 90 default rules
-
A note from our sponsor - AppSignal
www.appsignal.com | 7 Oct 2026
Index
What are some of the best open-source Penetration Testing projects in Rust? This list will help you:
| # | Project | Stars |
|---|---|---|
| 1 | KeyHunter | 193 |
| 2 | sh4d0wup | 131 |
| 3 | ghosthound | 44 |